Common Admin Tasks
Updating the ESM License¶
Using a web browser, navigate to http://localhost:18080/esm/ where 18080 is the port you configured ESM Server on. If accessing from a machine other than the server, you must specify the hostname or IP address of the ESM Server in place of
localhost. You should be presented with a screen requesting a license file
Click Browse to navigate and select your ESM license file.
Click Upload, then click Renew License.
The License Holder and Expiry Date should be updated with the new license details.
Click Refresh. You should see the main ESM Web Application screen.
Sessions with an ESM type of
SYS cannot be terminated from the user interface, regardless of the settings configured within the
ESM 2020 introduces enhanced security and configuration capabilities for terminating sessions. The functionality to terminate sessions from the ESM user interface requires the configuration of the
terminateSpec.yaml file. This functionality is disabled by default.
To enable the session terminate capability remove the
.template extension from the
terminateSpec.yaml template file which is found in the
bin folder of the agent.
terminateSpec.yaml file uses regular expressions to match the name of the process that is requested to be killed and the owning user of the process that is to be killed. The configuration in the
terminateSpec.yaml file extends the security capabilities that are found in the ESM user interface.
||Regular expression pattern to match the process command line.|
||Regular expression pattern to match the process|
||Boolean parameter about whether the process that matches the above two rules can be terminated.|
An example terminate spec block for a SAS9 environment on Linux might look like the following:
terminateSpec: - processFilterRegex: .*SASFoundation\/9.4\/sas.* userFilterRegex: '' canBeTerminated: true
The above example allows any privileged user in ESM to kill any SAS session, where that process is owned by any user, and where the installed path of SAS is something like
ESM Server Database Management¶
ESM uses a PostgreSQL relational database as its data server. You can use standard PostgreSQL data backup procedures to back up and restore the database used by ESM. For example, you could use the pgAdmin graphical user interface for manual backups, or you can integrate the pg_dump utility into scheduled scripts for automatic backups.
ESM ships with a modified version PostgresSQL 12.
To back up using the pg_dump utility:
Run pg_dump to export the ESM database:
$ cd /path/to/esm-server/pgsql/bin $ ./pg_dump -h localhost -p 15432 -U esm -d esm > /backup/path/esm-data-postgres.sql
Archive the exported database file per your organization's standards.
The text file containing the SQL that is created by pg_dump can be read in by the psql utility. To restore a backup of the ESM Server database:
- Run psql to import the ESM server database:
$ cd /path/to/esm-server/pgsql/bin $ ./psql -h localhost -p 15432 -U esm -d esm < /backup/path/esm-data-postgres.sql